中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

51 records (took 0.028 seconds)

    Secure Information Storage
    41.
    发明申请
    Secure Information Storage 有权

    公开(公告)号：US20210319120A1

    公开(公告)日：2021-10-14

    申请号：US17355297

    申请日：2021-06-23

    Applicant: Citrix Systems, Inc.

    Inventor： Thomas Kludy ,  Ricardo Fernando Feijoo

    IPC: G06F21/60 ,  G06F21/62 ,  H04L9/08 ,  H04L29/06 ,  G06Q20/00 ,  G06Q20/38 ,  G06Q20/36 ,  H04W12/06

    Abstract: Embodiments of the disclosure include systems and methods for secure storage and/or retrieval of customer secrets by, e.g., a cloud services provider. According to methods, secret data that is to be securely stored may be transmitted, along with an initialization vector, to an encryption service for encryption using a private key stored on in a remote key vault. The encrypted data can be returned and stored, in its encrypted form, in a secure storage along with the initialization vector data. To retrieve the securely stored data, embodiments disclose retrieving the encrypted form of the data and transmitting it, along with its related initialization vector data, to the encryption service for decryption using the private key stored in the remote key vault. The decrypted data can then be made available to a requesting product service.

    MULTIPLE IDENTITY PROVIDER AUTHENTICATION SYSTEM
    42.
    发明申请
    MULTIPLE IDENTITY PROVIDER AUTHENTICATION SYSTEM 有权

    公开(公告)号：US20210136058A1

    公开(公告)日：2021-05-06

    申请号：US16669992

    申请日：2019-10-31

    Applicant: Citrix Systems, Inc.

    Inventor： Katia Lopez ,  Joel Pineiro ,  Javier Alejandro Figueroa ,  Ricardo Fernando Feijoo

    IPC: H04L29/06

    Abstract: Methods and systems for authentication using multiple identity providers are described herein. A first identity provider may receive, e.g., from a second identity provider, an indication of an authentication request. The first identity provider may retrieve, from a storage device, session information associated with the request. The first identity provider may authenticate, using one or more first functions, based on the session information, and based on authentication credentials received from a user, the user. Based on the authentication, the first identity provider may modify the session information. The second identity provider may authenticate, based on the session information and using one or more second functions, the user. The one or more second functions may comprise providing the user a token based on the session information. The session information may be subsequently deleted.

    Searching and aggregating data across multiple geolocations
    43.
    发明授权
    Searching and aggregating data across multiple geolocations 有权

    公开(公告)号：US10885028B2

    公开(公告)日：2021-01-05

    申请号：US15875087

    申请日：2018-01-19

    Applicant: Citrix Systems, Inc.

    Inventor： Jose Reyes ,  Tom Kludy ,  Ricardo Fernando Feijoo

    IPC: G06F16/2453 ,  G06F9/455 ,  G06F16/182 ,  G06F16/18 ,  G06F16/23 ,  G06F16/27

    Abstract: Methods and devices for searching and aggregating data in a distributed cloud computing environment are provided. In some embodiments, a request from a client to perform a data transaction is received by a first server. The first server simultaneously spawns a plurality of threads, each thread sending to a different server of a plurality of servers the request to perform the data transaction. A response indicating whether the data transaction was performed by the server is received by the first server and from each server of the plurality of servers. In response to an indication that the data transaction was performed by one or more servers of the plurality of servers and when the data transaction is a get transaction: data corresponding to the data transaction is received by the first server and from the one more servers, the data received from the one or more servers is aggregated by the first server to form combined data, and the first server sends the combined data to the client. Finally, the first server sends a notification including information indicating a result of the data transaction to the client.

    Extending single-sign-on to relying parties of federated logon providers
    44.
    发明授权
    Extending single-sign-on to relying parties of federated logon providers 有权

    公开(公告)号：US10721222B2

    公开(公告)日：2020-07-21

    申请号：US15679686

    申请日：2017-08-17

    Applicant: Citrix Systems, Inc.

    Inventor： Ricardo Fernando Feijoo ,  Thomas Kludy

    IPC: H04L29/06 ,  G06F21/33 ,  G06F21/41 ,  G06F21/40

    Abstract: Aspects of the disclosure relate to extending single-sign-on to relying parties for federated logon providers. An enterprise identity provider server may receive a first authentication token previously issued to an enterprise server by the enterprise identity provider server. Subsequently, the enterprise identity provider server may retrieve, from a token store, a second authentication token associated with a federated identity service provided by a federated identity provider server. The enterprise identity provider server may refresh the second authentication token with the federated identity service provided by the federated identity provider server to obtain a refreshed authentication token. Finally, the enterprise identity provider server may send the refreshed authentication token to the enterprise server, which may enable user devices managed by the enterprise server to access one or more resources provided by a third party system using the federated identity service.

    Identity management connecting principal identities to alias identities having authorization scopes
    45.
    发明授权
    Identity management connecting principal identities to alias identities having authorization scopes 有权

    公开(公告)号：US10440024B2

    公开(公告)日：2019-10-08

    申请号：US15482904

    申请日：2017-04-10

    Applicant: Citrix Systems, Inc.

    Inventor： Ricardo Fernando Feijoo ,  Thomas Michael Kludy

    IPC: H04L9/00 ,  H04L29/06

    Abstract: A principal database is described in which each entry includes one principal identity, and one or more alias identities that may each have an authorization scope. Principal identity attributes include a principal identifier and login credentials, and alias identity attributes include an authorization scope and login credentials. Responsive to successfully authenticating the user for a first application (a multiple-identity application), based on the alias identity login credentials, an access token containing both the alias identity attributes and the principal identity attributes is transmitted to the first application, causing the first application to grant a scope of access based on the authorization scope. Responsive to a request to authenticate the user for a second application (a single-identity application), the access token is transmitted to the second application without re-authenticating the user, causing the second application to grant a scope of access based on the principal identifier.

    NORMALIZING USER IDENTIFICATION ACROSS DISPARATE SYSTEMS
    46.
    发明申请
    NORMALIZING USER IDENTIFICATION ACROSS DISPARATE SYSTEMS 审中-公开

    公开(公告)号：US20190114340A1

    公开(公告)日：2019-04-18

    申请号：US15784328

    申请日：2017-10-16

    Applicant: Citrix Systems, Inc.

    Inventor： Ricardo Fernando Feijoo

    IPC: G06F17/30

    Abstract: A technique involves normalizing identification of users (e.g., different customer organizations) across disparate local systems (e.g., different electronic platforms that provide different products and/or services). Such normalization of user identification enables a provider to accurately ascertain a particular user of multiple disparate local systems even when the multiple disparate local systems identify that user using different identification schemes. Accordingly, the provider is able to offer enhanced support to that user across the multiple disparate local systems. For example, with such normalization of user identification, the provider may employ a single authentication system across the various local systems thus enabling the user to authenticate via the same authentication process regardless of which local system the user attempts to access. As another example, the provider may collect data among the disparate local systems and apply analytics to identify optimization opportunities for the user that could not be otherwise be conveniently determined.

    Extending Single-Sign-On to Relying Parties of Federated Logon Providers
    48.
    发明申请
    Extending Single-Sign-On to Relying Parties of Federated Logon Providers 审中-公开

    公开(公告)号：US20190058706A1

    公开(公告)日：2019-02-21

    申请号：US15679686

    申请日：2017-08-17

    Applicant: Citrix Systems, Inc.

    Inventor： Ricardo Fernando Feijoo ,  Thomas Kludy

    IPC: H04L29/06 ,  G06F21/41 ,  G06F21/33

    Abstract: Aspects of the disclosure relate to extending single-sign-on to relying parties for federated logon providers. An enterprise identity provider server may receive a first authentication token previously issued to an enterprise server by the enterprise identity provider server. Subsequently, the enterprise identity provider server may retrieve, from a token store, a second authentication token associated with a federated identity service provided by a federated identity provider server. The enterprise identity provider server may refresh the second authentication token with the federated identity service provided by the federated identity provider server to obtain a refreshed authentication token. Finally, the enterprise identity provider server may send the refreshed authentication token to the enterprise server, which may enable user devices managed by the enterprise server to access one or more resources provided by a third party system using the federated identity service.

Patent Agency Ranking